azuresql-db-functions
Pass
Audited by Gen Agent Trust Hub on Sep 7, 2026
Risk Level: SAFE
Full Analysis
- Credential Management Best Practices: The skill provides examples for
local.settings.jsonthat include placeholders for local development credentials. Importantly, it includes a clear instruction to not commit this file to version control, which is a fundamental security practice to prevent the accidental exposure of sensitive connection strings and passwords. - Trusted Resource Integration: The skill references official Microsoft resources, including container images from the Azure Container Registry (
azurecr.io) and NuGet extension packages. These references target well-known, authoritative sources for the tools being described, which is appropriate for the intended development workflow. - Least-Privilege Security Guidance: In the discussion of event-driven triggers, the skill provides specific T-SQL commands to grant only the necessary permissions (e.g.,
VIEW CHANGE TRACKING,SELECT, and specific schema permissions) to a database principal. This encourages developers to follow the principle of least privilege rather than relying on administrative accounts. - Standard Development Tooling: The execution patterns provided rely on established development tools like the Azure Functions Core Tools (
func) and the .NET CLI (dotnet). The manual scaffolding workaround provided for the SQL trigger demonstrates a responsible approach to handling discrepancies in development tooling.
Audit Metadata